cannot login to azure ad joined computer

Intune, Azure AD subscription, setup, and configuration should be completed.License -> Windows 11 Pro or Enterprise versions are supported for Azure AD Join.Windows 11 or 10 Azure AD join scenario is used mostly for CYOD scenarios. The following is the recommendation you should consider before trying Windows 11 Azure AD Join and enrolling in Intune. Prerequisite Checks – Before Windows 11 Azure AD Join I will try to update the screenshot as soon as possible. But the steps to follow are the same for Windows 11 and Windows 10. NOTE! – Some of the screenshots are taken from Windows 10. By default, all events of a day are displayed together and can then be expanded.Azure AD Join Process and Intune Auto Enrollment for Windows 11 The important thing about the non-interactive logs is that the events are grouped together. The sign-in is done at the Policy Administration Service from an IP address from the Microsoft data center in Amsterdam (West Europe). The following Windows Sign-In logs caught my eye. In the first step, I only filtered for incorrect logins for the affected user. This was to be expected, since the sign-in with Windows Hello for Business is not interactive, but is performed with the Azure AD user certificate. There is no information about this login in the interactive sign-in logs. Since this is a login to Azure AD, there must be other logs available. The sign-in event is logged with an incorrect login in the context of the SYSTEM account.įurther information could not be found on the server. The security event log on the server was not very fruitful. The installed Windows 10 version is 1809 or newerįor sign-in with biometrics this is necessary, with PIN it worked longer.The client has Windows Hello for Business configured.Microsoft’s Troubleshooting Guide describes that the cause is a conditional access policy configured with multi-factor authentication (MFA), an unsupported Windows 10 client version, and Windows Hello for Business not enabled. Try a different sign-in method or contact your system administrator.

The sign-in method you’re trying to use isn’t allowed.

Cannot login to azure ad joined computer